CVE-2024-9823CWE-400

Jetty DOS vulnerability on DosFilter

Medium · published October 14, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00940 · 60.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-10-14T15:03Z
EPSS history
Timeline
  • 14 OCT 15:03Z
    Jetty DOS vulnerability on DosFilter
    cvelistv5